You need something like Traefik which does https for the services.

Actually it is simple and secure. I’ve been using it for 8+ years.

This. Do not expose any service to the internet or even LAN. All clients need to connect via VPN to your machine, no matter if from LAN/home or on the road (WAN/Internet). You can still use a reverse proxy and custom domain names so inside the VPN network everything is HTTPS and each service has a nice domain name.

How often did you need a raw video older than one year?

Thank you, but this only applies to priviledged containers (which are normally not used and should not be used)

Can you provide the required arguments for chroot? I’ve just opened the bash shell of a running container (docker exec -it mycontainer bash) and tried to “break out” using “chroot /”. I can’t access any files of the host.

How would a rogue container be able to access the root directory of the host? Wouldn’t it just be able to access the data on the docker volumes? Thank you.

I can recommend purelymail.com. Cheap, works great with my custom domain, allows unlimited mail boxes ans users for the whole family.

Until August 2024 only .arpa was reserved for residential network services. Glad to hear there is something new less akward!

I’m using syncthing-fork on Android for years on multiple devices without problems.

postgresql db (e.g. in Docker) + Dbeaver as GUI client

Yes, exactly. I push photos into the “import folder” of Photoprism. I don’t manually trigger the re-index but I restart photoprism at night using a cronjob. I am not using settings like “PHOTOPRISM_AUTO_IMPORT”. Contact me if you need me to investigate more.

I’m uploading to a directory using syncthing. It’s working perfectly fine without any scripts. I’m running Photoprism in a docker container.

I can also recommend zfs on debian. Even if you only using two disks you will be still protected from bit rot.

I can recommend dockprom. It comes with grafana preconfigured.

ZFS is rigid? Please explain

Get a mainboard and CPU supporting ECC ram. Combine it with ZFS as the file system. With this setup you are safe from bitrot.

True, but I thought we are talking about security here…?

How would is a typo possible if one is using a password manager?

Tell me